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About This Guide 


This guide describes how to use Storage Management Services (SMS) for Novell Open Enterprise 
Server (OES) 2 for Linux. 


This guide is divided into the following sections: 


+ 


+ 


+ 


Chapter 1, ”SMS Overview,” on page 9 

Chapter 2, ”What's New,” on page 13 

Chapter 3, ”Installing and Configuring SMS,” on page 15 
Chapter 4, ”Using SMS,” on page 21 

Chapter 5, ”Optimizing SMS,” on page 31 

Chapter 7, ”SMS Security for SMDR,” on page 41 
Chapter 8, ”Coexistence and Migration Issues,” on page 45 
Chapter 9, ”Troubleshooting SMS,” on page 49 
Appendix A, ”TSA Features,” on page 55 

Appendix B, ”Creating SMS Debug logs,” on page 61 
Appendix C, ”POSIX File System Support,” on page 65 
Appendix D, ”SMSLS Utility,” on page 67 

Appendix E, ”Documentation Updates,” on page 69 


Audience 


The guide is intended for network administrators. 


Documentation Updates 


For the most recent version of the Storage Management Services Administration Guide, see the Novell 
Open Enterprise Server 2 documentation Web site (http://www.novell.com/documentation/oes2/) 


Feedback 


We want to hear your comments and suggestions about this manual and the other documentation 
included with this product. Please use the User Comments feature at the bottom of each page of the 
online documentation, or go to www.novell.com/documentation/feedback.html and enter your 
comments there. 


Additional Documentation 


+ For documentation on SBCON utility for NetWare, see the NetWare 6.5 SP8 Documentation Web 


Site (http://www.novell.com/documentation/nw65/). 


About This Guide 
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1,1 


1.2 


SMS Overview 


Novell Backup infrastructure (Storage Management Services, or SMS) provides backup applications 
with the framework to develop complete backup and restore solutions. SMS helps back up file 
systems (such as NSS) or applications (such as GroupWise) on Novell Open Enterprise Server 2 for 
Linux servers to removable tape media or other media for off-site storage. 


The following topics are discussed in this section: 


+ Section 1.1, “Backup Properties and Operations,” on page 9 
+ Section 1.2, “SMS Components,” on page 9 
+ Section 1.3, “Backup Applications,” on page 11 


Backup Properties and Operations 


A logical backup typically involves a backup server and a target server. The backup server hosts the 
backup application and possibly the tape device as well. The target server contains the data that 
needs to be protected and is also known as the backup target. 


A backup target, in turn, can be a file system or an application. With a file system target, entities that 
are backed up are files and directories along with their associated metadata. With an application 
target, application-specific objects are exposed for backup. For example, a User object maybe exposed 
to determine backup of a particular mailbox. 


A typical backup must allow for selection, filtering and control of what entities are backed up. This 
processing granularity provides tremendous benefits during a restore operation where an 
administrator has the ability to restore specific entities, such as a file or an application-specific object. 


SMS provides a framework that can provide this functionality. The most significant property of SMS 
is its definition of a single consistent interface for all file systems and applications on an OES 2 Linux 
server. Backup applications can thus provide the backup administrator with selection and filtering 
operations in a consistent manner across all backup targets. 


SMS Components 


In order to achieve full functionality, SMS is implemented as two independent components that 
provide the following functional abstractions: 


+ Storage Management Data Requester (SMDR) provides remote connectivity and transfers data 
between the target and the backup servers. 


See Section 1.2.1, “Storage Management Data Requester,” on page 10 for more information. 
+ Target Service Agent (TSA) provides abstraction details of the specific target being backed up. 


See Section 1.2.2, “Target Service Agent (TSA),” on page 10 for more information. 


SMS Overview 
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1.2.1 


1.2.2 


Backup Server Backup Targets 


Backup 


NetWare 6.5 


> Ej 9) 


KE 


Tape device NetWare 5.1 


The backup process is explained below: 


+ A typical backup involves the backup application using the SMDR on the backup server to 
communicate with the target server. The SMDR on the target server uses a TSA to read and 
abstract the target data. 


+ The backup application uses a formatted buffer delivered by the TSA and the SMDR to send it to 
a storage medium such as a tape drive. 


+ Every target server needs to have its own TSA that understands the target-specific objects. If a 
new target needs to be backed up, only a new TSA needs to be added and the entire backup 
infrastructure can be reused. 


Storage Management Data Requester 


The Storage Management Data Requester (SMDR) is the communication module in the SMS 
architecture. The SMDR defines the API framework, provides remote connectivity, and abstracts the 
details of any communication between the servers. Thus, SMDR is capable of transferring any target 
data between the target and backup server. Most backup applications use the API exposed by SMDR 
to make use of functionality exposed by SMS. For information on configuring SMDR, See Section 3.4, 
”Configuring SMDR,” on page 15. 


Target Service Agent (TSA) 


The Target Service Agent (TSA) provides an implementation of SMS APIs for a particular target. The 
TSA provides transparency by abstracting details of the specific service (such as GroupWise or NSS) 
being backed up. For example, various backup applications use file system TSA to back up and 
restore NSS file system data and metadata (trustee assignments, namespaces, and file attributes). A 
TSA understands the target and knows how to scan, read, and write a particular target's data. Each 
target needs a TSA. 
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Table 1-1 Target Services and Their Corresponding Target Service Agents in OES 2 Linux 


Target Service Target Service Agent 
NSS file system TSAFS 
Cluster resources TSAFS 
VFS-compliant file systems TSAFS 
eDirectory TSANDS 
GroupWise TSAFS 
TSAFSGW 
¡Folder TSAIF 


+ 


TSAFS backs up a target server, so it services all file systems (and possibly cluster resources) on 
a particular target server. 


GroupWise backup functionality is included with the file system TSA. 


However, the functionality does not provide object level backup, but simply ensures that 
GroupWise database backups are consistent by freezing the GroupWise database before a 
regular file system backup. This functionality is not turned on by default. See ”File System TSA 
(ISAFS)” on page 11 to turn on this functionality as required. 


File System TSA (TSAFS) 


The File System TSA (TSAFS) supports all VFS-compliant file systems and NSS. Some of the salient 
features are: 


+ 


+ 


+ 


Implements a predictive data caching model that provides improved backup performance. 
Provides parameters to fine-tune performance. 

Provides parameters that can be used to fine-tune performance to the specific environment. 
Ability to interpret OES 2 Linux data streams. 

Cluster enabled. 

Multiprocessor enabled. 

Compatible with the data format used by existing versions of the TSA. 

Ability to ensure consistency while backing up GroupWise databases. 

Provides a NetWare emulation mode. 


Ability to handle data across locales by providing data in UTF-8 format. 


1.3 Backup Applications 


SMS provides the nbackup backup application on OES 2 Linux. It includes the following functions: 


+ 


Provides a basic backup solution that is not designed to provide advanced session management 
and other features available with third-party backup applications. 


Can be used to create consistent backups, but are recommended for use as technology 
demonstrators, especially in backup performance. 


Used to troubleshoot problems 
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Several backup application vendors provide an enterprise backup solution using SMS. 


For information, see the nbackup(1) man page on OES 2 Linux. 
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2.1 


2.2 


2.2.1 


What's New 


This section describes features that have been added since the initial release of Novell Open 
Enterprise Server (OES) 2 for Linux. 

+ Section 2.1, “What's New (OES 2 SP3 April 2013 Patches),” on page 13 

+ Section 2.2, “What's New (OES 2 SP3 January 2013 Patches),” on page 13 

+ Section 2.3, “August 2011 Patch release,” on page 14 

+ Section 2.4, “OES 2 SP3,” on page 14 

+ Section 2.5, “OES 2 SP2,” on page 14 

+ Section 2.6, “OES 2 SP1,” on page 14 


What's New (OES 2 SP3 April 2013 Patches) 


Upgrade to eDirectory 8.8.7 


An upgrade to Novell eDirectory 8.8 SP7 is available in the April 2013 Scheduled Maintenance for 
OES 2 SP3. For information about the eDirectory upgrade, see TID 7011599 (http://www.novell.com/ 
support/kb/doc.php?id=7011599) in the Novell Knowledgebase. 


There will be no further eDirectory 8.8 SP6 patches for the OES platform. Previous patches for Novell 
eDirectory 8.8 SP6 are available on Novell Patch Finder (http://download .novell.com/patch/finder/ 
*familyId=1128pproductld=29503). 


What's New (OES 2 SP3 January 2013 Patches) 


+ Section 2.2.1, “Upgrade to Novell iManager 2.7.6,” on page 13 
+ Section 2.2.2, “New Novell Cluster Services Plug-in for iManager 2.7.5 and Later,” on page 14 


Upgrade to Novell ¡Manager 2.7.6 


The January 2013 Scheduled Maintenance for OES 2 SP3 includes a channel upgrade from Novell 
iManager 2.7.5 to Novell iManager 2.7.6. 


Novell iManager 2.7.6 provides the following enhancements: 


+ Microsoft Internet Explorer 10 certification in the desktop user interface view on Windows 8 
(excluding Windows 8 RT) and Windows Server 2012. 

+ Apple Safari 6.0 certification on Mac OSX Mountain Lion (version 10.8). 

+ ¡Manager Workstation certification on Windows 8 Enterprise Edition (32-bit and 64-bit). 

+ Manager 2.7.6 support for Tomcat 7.0.32. and Java 1.7.0 04 versions. 
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iManager documentation links in this guide have been updated to reflect this change. 


iManager 2.7.6 documentation is available on the Web (https://www.netiq.com/documentation/ 
imanager/). For earlier iManager versions, see ”Previous Releases” (https://www.netiq.com/ 
documentation/imanager27/#prev). 


2.2.2 New Novell Cluster Services Plug-in for iManager 2.7.5 and Later 


The Clusters plug-in for Novell iManager 2.7.5 or later supports the management of OES and 
NetWare clusters and resources. The availability of different cluster management features depends 
on the version of Novell Cluster Services and the server platform that are installed on the cluster 
being managed. A comparison of the old and new interface is available in “What’s New (January 
2013 Patches)” (http://www.novell.com/documentation/oes2/clus_admin_lx/data/ 
ncs_new_jan2013.html) in the OES 2 SP3: Novell Cluster Services 1.8.8 Administration Guide for Linux 
(http://www.novell.com/documentation/oes2/clus_admin_Ix/data/h4hgu4hs.html). 


2.3 August 2011 Patch release 


With the release of the August 2011 patches for OES 2 SP3, the base platform has been upgraded to 
SLES 10 SP4. 


SLES 10 SP4 support is enabled by updating OES 2 SP3 servers with the move-to-sles10-sp4 patch. 
Novell encourages customers to update to this latest set of patches. For more information, see 
“Updating (Patching) an OES 2 SP3 Server” in the OES 2 SP3: Installation Guide. 


SLES 10 SP4 is considered a lower-risk update that contains a set of consolidated bug fixes and 
support for newer hardware. It does not impact the kernel ABI or third-party certifications. 


With the release of the August 2011 patches, OES 2 SP2 customers who upgrade to OES 2 SP3 via the 
move-to patch will receive the SLES 10 SP4 updates. New installations of OES 2 SP3, migrations to 
OES 2 SP3, and down-server upgrades to OES 2 SP3, should all be performed using SLES 10 SP4 
media. 


2.4 OES 2 SP3 


The following features are new in the OES 2 SP3 release. 


+ “smsconfig -r, --refresh” on page 19 


+ TSAGW functionality is integrated with TSAFS. With this feature users need not install 
GroupWise TSA. 


25 OES 2 SP2 


There are no feature changes in the OES 2 SP2 release. 


2.6 OES 2 SP1 


The following feature is included in OES 2 Support Pack 1 release: 


SMSLS Utility: The smsls utility generates the list of files and directories based on the specified filter 
options. For more information, see Appendix D, “SMSLS Utility,” on page 67. 


14 OES 2 SP3: Storage Management Services Administration Guide for Linux 


3.1 


3.2 


3.3 


3.4 


Installing and Configuring SMS 


During the installation of Novell Open Enterprise Server (OES) 2 for Linux, Storage Management 
Services (SMS) is installed by default. 

+ Section 3.1, “System Requirements,” on page 15 

+ Section 3.2, “Updating Existing Installations,” on page 15 

+ Section 3.3, “Starting SMS Services,” on page 15 

+ Section 3.4, “Configuring SMDR,” on page 15 

+ Section 3.5, “Configuring the Target Service Agent for File System,” on page 17 


System Requirements 


SMS runs on any system where OES 2 Linux can be installed. The minimum system requirements for 
SMS are the same as the requirements for an OES 2 Linux server as described in “Preparing to Install 
OES 2 SP3” in the OES 2 SP3: Installation Guide. 


Updating Existing Installations 


Existing OES 1 Linux servers can be upgraded to OES 2 Linux. As a part of the upgrade, SMS can also 
be selected for installation. 


OES supports patch updates to the servers. SMS is also available via patch updates. For more 
information on how to configure OES 2 Linux server to receive updates via patch channels, see 
“Updating (Patching) an OES 2 SP3 Server” in the OES 2 SP3: Installation Guide. 


Starting SMS Services 


On reboot of the server, SMS is started by default at run levels 3 and 5. You can also start SMS services 
by using a shell to execute the startup script /etc/init .d/novell-smdrd. 


By default, the configuration file for SMDR autoloads TSAFS. To manually load TSAFS, use 
smsconfig. For information, see Section 3.5.2, “Using the Command Line,” on page 19. 


Configuring SMDR 


+ Section 3.4.1, “Using iManager,” on page 16 
+ Section 3.4.2, “Using the Command Line,” on page 17 
+ Section 3.4.3, “Using a Configuration File,” on page 17 
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3.4.1 


Using iManager 


1 In iManager, click SMS Backup and Restore, then click SMDR Configuration. 


¡Novella iManager — 
Unrestricted Access 


| ©) Roles and Tasks 

Aa Categories 

* Licenses 

+ Linux User Management 

+ NetWare Product Usage 

+ MMAS 

+ Howell Certificate Access 

* Novell Certificate Server 

* Partition and Replicas 

* Pariwordi 

* QuickFinder 

* Rights 

* Schema 

* Servers 

7 SMS Backup and Restore 
SHOR Options 
TSAES Options 

+ SNMP 

* Storage 

+ Time Synchronization 

+ Users 

+ WAN Traffic 


v 


^ 


SE Bg SEE] N 


^ 


SMOR Options E 


Server: SERVER context 
Supported Protocols 

[9] smar 

[v] vor 


IP Address: 10.10 10.10 v 


Discovery Mechanisms 
Far 


SAP 


[v] HOSTS/DNS 
Discovery order 
SAP 
HOSTS/DNS 


ae 


ok j Cancel 


2 Select the server for which you need to modify the SMDR configuration settings, using the 
eDirectory object selector. 


The following options are displayed. Select the required options, then click OK. 


+ Supported Protocols: SMDR supports Internet Protocol (IP). 


On modifying the value for this option, the daemon takes the values when you restart the 
daemon and the clients that use smdr library to take backup will take the values 
immediately except for the clients that already have established the connections. 


+ IP Address: SMDR can be configured to listen on the specified IP address on a multi- 
homed server. 


+ Discovery Mechanisms: SMDR supports the following discovery and name resolution 


mechanisms: 


The daemon takes the values when you restart the daemon and the clients that use smdr 
library to take backup will take the values immediately except for the clients that already 
have established the connections. 


+ SLP Discovery: SMDR can be configured to use SLP for discovery and name 
resolution. This enables SMDRs to locate other SMDRs running on other servers in the 
network. Every SLP-enabled SMDR registers itself in the smdr.novell domain when 
loaded. The SLP-enabled SMDRs query this domain for locating registered SMDRs. 


If cluster-enabled resources are to be backed up or restored, SLP should be used as the 
discovery mechanism. 
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3.4.2 


3.4.3 


3.5 


+ Name Resolution Through HOSTS File: SMDR can be configured to use a hosts file 
(/etc/hosts) for IP address name resolution. The HOSTS file is automatically 
configured when you install TCP/IP. If entries are added to this file, SMDR uses these 
entries to resolve the IP address. 


SMDR can be configured to alter the order of server name resolution by using the 
Discovery Order list box. 


Using the Command Line 


SMDRD is located at /opt/novell/sms/bin folder. SMDR can be configured using the command 
line options: 


smdrd [--(no)slp] [--(no)hosts] [--ip <local ip address>] 


For information, see the smdrd(8) man page in OES 2 Linux. 


Using a Configuration File 


SMDR configuration file is located at /etc/opt/novell/sms/smdrd.conf on OES 2 Linux servers. 
Each instance of SMDR reads the configuration file for its default configuration. 


For more information on how to edit the configuration file, see the smdrd.conf (5) man page in OES 
2 Linux. 


Configuring the Target Service Agent for File System 


TSAFS provides configurable parameters to help tune its performance. It also provides configurable 
parameters to control certain specific features that are supported by it. 


+ Section 3.5.1, “Using iManager,” on page 18 
+ Section 3.5.2, “Using the Command Line,” on page 19 
+ Section 3.5.3, “Using a Configuration File,” on page 20 
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3.5.1 


Using ¡Manager 
Complete the following steps to configure the parameters used by TSA: 


1 In iManager, click SMS Backup and Restore, then click TSAFS Options. 


== IS DEEE al N 


| © Roles and Tasks og | ^ 
TSAFS Options 
All Categories ewe 
+ Print A 


D gure the parameters used by the Target Service Agent (TSA] to fine-tune 
* LDAP performance on this serve 
+ Linux User Management 
* NMAS Server: SERVER. context Sa 
+ Novell Certificate Access 
g TSA Mode 
E Novell Certificate Server 
© linux O NetWare O Dual 

+ Partition and Replica 

Management Settings 
+ Passwords 


Non Read Buffer Size: 65536 


* Rights Read Threads Per Job 4 
* Samba Management 

Read Thread Allocation 100 
* Schema 


* Servers Read Ahead Throttle: 2 
= SMS Backup and Restore 
SHOR Options 
TSAFS Options Y] 
* SNMP T 


Cache Memory Threshold: 10 


Ensble Caching 


Enable Clustering 


* Storage 


n _OK | _ Cancel | 
+ WAN Traffic 


2 Select the server for which you need to modify the TSA configuration settings, using the 


eDirectory object selector. 


3 Enter the following values and click OK, 


+ TSA Mode: TSA Mode can be used to expose NSS as a native Linux file system (Linux 


Mode) or emulate NetWare file system semantics (NetWare Mode) on OES 2 Linux. 


If the Dual Mode is selected, both NetWare and Linux semantics are simultaneously 
exposed and can be used independently of each other. By default, the TSA Mode is set to 
Linux. 


The changed value takes effect when you reload the tsafs module. 


Read Buffer Size: The number of data bytes read from the file system by a single read 
operation. 


This parameter is based on the buffer size requested by the engine. For example, if the 
engine requests 64 KB of data for each read operation, set the buffer size to 64 KB to allow 
the TSAFS to service the engine better. By default this is set to 65536 bytes. 


The modified value takes effect when you reload the tsafs module. 


Read Threads Per Job: The number of read-ahead threads for a job. This enables the TSAFS 
to read data ahead of the engine request during backup. This switch is based on the number 
of processors in the system. The default value is 4 for a single or dual processor system. Set 
the read threads to a higher value if the system has more processors. 


The changed value takes effect when you reload the tsafs module. 
Read Thread Allocation: The percentage of Read Threads Per Job that processes a data set. 


Read Thread Allocation can be used to control the maximum number of read threads that 
may be allocated to process a single data set. By default, the Read Thread Allocation is set to 
100 (%). It can have a value in the range 10 (%) to 100 (%). It is recommended that this value 
be set to 100 (%) if the backup application requests data sets serially. 
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Read Ahead Throttle: The maximum number of data sets that the TSA processes 
simultaneously. 


Read Ahead Throttle can be used to limit the number of simultaneous data sets that are 
being cached. In certain runtime scenarios, it helps in overriding the Read Thread 
Allocation in order to complete processing of large data sets. By default, the Read Ahead 
Throttle is set to 2. It can have a value in the range 1 to 32. 


Cache Memory Threshold: The percentage of unallocated server memory that the TSA can 
utilize to store cached datasets. This represents a maximum percentage value of unallocated 
server memory that the TSA uses to store cached datasets. The default value is 25% of 
unallocated server memory. The cache memory utilized by the TSA is dynamically reset 
based on the available unallocated memory. 


The modified value takes effect when you reload the tsafs module. 


Enable Caching: This option can be used to specify if the TSA should do predictive caching 
during backups. Caching improves backup performance, on certain workloads, by 
prefetching files in memory. By default, Enable Caching is selected. 


The modified value takes effect when you reload the tsafs module. 


Enable Clustering: Determines cluster support. If the backup server does not support 
clusters, this option is disabled. Select this option if the TSA is running on a cluster node 
and the backup engine is cluster-enabled. Deselect it if the TSA is running on a non-cluster 
node or the backup engine is not cluster-enabled. This is selected by default. 


Running a cluster-enabled TSA on a non-cluster node does not affect functionality in any 
way. 


The modified value takes effect when you reload the tsafs module. 


Using the Command Line 


The Storage Management Data Requestor (SMDR) is a daemon process that holds the information 


regarding Target Service Agents (TSA) that have registered to it. 


The process of registering or de-registering a TSA with SMDR is referred to as a loading or unloading 


the TSA. The TSAs should be registered with SMDR for the backup engines to access the specific 


target. 

The /opt/novell/sms/bin/smsconfig command can be used to load or unload the (TSA) with the 
SMDR daemon: 

smsconfig [ -1 | -u | -t] [TSA module name] [TSA options] 


For example: 


smsconfig -r, --refresh 


smsconfig -1 tsafs 
smsconfig -u tsafs 


smsconfig -t 


Specify this option in Cluster Unload scripts to inform 
SMDRD regrading the cluster resource failover. This 
option must be passed with -p 
«pool servername».This option unregisters the pool 
and is supported with TSAFS. 


Registers the TSA, tsafs with SMDR 
De-registers the TSA, tsafs from SMDR 


List the TSAs currently registered with SMDR 
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smsconfig -l tsafs --tsaMode=Linux Set the tsamode to linux to expose NSS as a 
native Linux file system. This is the default. 


Set the tsamode to netware to expose NSS with 
NetWare file system semantics. 


Set the tsamode to dual, if both NetWare and Linux 
semantics should be simultaneously exposed and be 
used independently of each other. 


The TSAs also expose their command line configuration interface to the user through smsconfig, 
which enables the user to configure the TSAs. For example, the following command can be used to 
see TSAFS configurable parameters: 


smsconfig -1 tsafs --help 
TSAFS can be configured during registration as shown in the following example: 


smsconfig -1 tsafs --ReadThreadsPerJob=6 


This configuration persists till the TSA is unloaded. 


smsconfig -r tsafs -p ClusterPool Server 
On a cluster resource failover, the specified pool is unregistered. 


For more information regarding smsconfig and tsafs configurable parameters, see the smsconfig(1) 
and tsafs(1) man pages. 


For advanced configuration, see Section 5.3, “Fine-Tuning SMS Performance,” on page 33. 


To enable additional backup features, see Section 4.1.4, “Additional Backup Features,” on page 25. 


3.5.3 Using a Configuration File 


The TSAFS configuration file is located at /etc/opt/novell/sms/tsafs.conf on OES 2 Linux 
servers. When the TSA is loaded, it reads the configuration file for its default configuration. 


For information, see the tsafs.conf(5) man page. 
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4.1.1 


Using SMS 


This section provides information on SMS features and how SMS can be used in various scenarios. 


Backup applications use SMS as an infrastructure to provide a complete backup solution. For specific 


information on features available in the backup application, see the vendor's documentation 
pertaining to the specific application. 


The following topics are discussed in this section: 


+ Section 4.1, “Backing Up Data Using SMS,” on page 21 
+ Section 4.2, “Restoring Data Using SMS,” on page 26 
+ Section 4.3, “Restoring NetWare Backups to OES 2 Linux File Systems,” on page 28 


Backing Up Data Using SMS 


This section provides information on how SMS backs up data from Novell eDirectory and from the 
file system. 


+ Section 4.1.1, “Prerequisites,” on page 21 

+ Section 4.1.2, “Backing Up the File Systems,” on page 23 
+ Section 4.1.3, “Backing Up Clusters,” on page 24 

+ Section 4.1.4, “Additional Backup Features,” on page 25 


Prerequisites 


Meet the following prerequisites before starting the backup software. 


Backing Up Open Files 


TSAFS supports backing up open files on Novell Storage Services (NSS) volumes if the CopyOn Write 


feature is enabled. 


To enable CopyOn Write on a single NSS volume, see Appendix A, File-Level Snapshot Commands in 


the OES 2: NSS File System Administration Guide (http://www.novell.com/documentation/oes2/ 
stor nss Ix nw/index.html?page-/documentation/oes2/stor nss lx nw/data/front.html£front). 
Supervisor rights are required to back up the open files. 
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Backing Up Compressed files 


When you perform a backup, you need to decide whether to keep compressed files in the same state 
or back them up in a decompressed state. 


Listed below are few guidelines to make this decision: 


+ Backups are faster if files are in compressed form. If volume compression is turned on and you 
back up compressed files in a decompressed state, restore speed is degraded when existing files 
are overwritten. 


+ Compression is not supported in some environments (such as Novell Storage Services 2.0). If 
you intend to restore a file that is currently compressed to an environment that does not support 
compression, back it up in a decompressed state. 


+ You might run out of disk space if you restore decompressed files to a volume, because the 
compression does not begin immediately. 


Backing Up Migrated Files 


Files that are not frequently accessed can be moved to tertiary storage by any Hierarchical Storage 
Management software (HSM Software). These files continue to be available in the form of stubs in the 
primary storage device. The stubs contain information necessary to access the file contents from the 
tertiary storage using the HSM software. 


During backup it is possible to back up these files in the following manner: 


+ Back up only the stubs 
+ Back up both the stubs and the data associated with the file 


If the tertiary device itself is backed up independently, choosing to back up only the stub information 
helps reduce the amount of data. This, in turn, helps save space on tape and increase backup 
performance because data does not need to be restored from the tertiary device during backup. 
However, restores require the HSM software to be set up and ensure tertiary storage associations are 
maintained as they were during the backup. 


When both the stub and the data are backed up, the data is restored for the backup process. On 
restore, either the stub or data or both can be restored. However, backing up migrated file data can 
impact the backup performance because the data needs to be demigrated from a tertiary storage 
device. In addition, the backup would include both the target server as well as the tertiary storage 
data, which requires adequate planning for tape storage. 


Before Running the Backup Software 
Before starting the backup process, you need to perform the following tasks: 


C] Users performing backup need to be LUM enabled. 
O Load the controller and storage device drivers on the backup server. 


C] Load the SMDR and TSAs on the backup and target server. 


See Section 3.3, “Starting SMS Services,” on page 15 for information on how to start SMS services. 
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Backing Up the File Systems 


To back up file system data, TSAFS must be loaded on each target server for which a backup is to be 
created (see ”Before Running the Backup Software” on page 22). 


TSAFS supports backing up: 
+ File system metadata such as name spaces, extended attributes, trustee rights, and data streams 


on OES 2 Linux servers. 


+ All POSIX* compliant file systems on ReiserFS, Ext2, Ext3, and XFS file systems OES 2 Linux 
servers, see Appendix C, “POSIX File System Support,” on page 65. 


+ NSS file system and associated metadata on OES Linux which are not available through POSIX 
interfaces. 


TSAFS uses the ECMA SIDF standard format to store the file system data. For information, see the 
Standard ECMA-208 Web site (http://www.ecma-international.org/publications/standards/Ecma- 
208.htm)). 


This section discusses the following: 


+ “Backing Up Trustee Assignments” on page 23 
¢ “Backing Up Links” on page 23 
+ “Backing up NCP and Dynamic Storage Technology Shadow Volumes” on page 24 


Backing Up Trustee Assignments 


Trustee assignments are stored as part of the file system as an Identifier (ID). 


TSAFS uses these IDs to determine the respective fully distinguished names (FDN) and backs up the 
FDNs. This allows trustees assignments to be restored even if a particular user object was deleted and 
re-created which would cause the ID to be different. Even if the User object is deleted and re-created 
with a new ID, the user’s trustee assignments in the file system are restored using the FDN. 


For additional information about object ID and trustee issues, see “Restoring Trustee or Owner 
Assignments” on page 28. 


Backing Up Links 


TSAFS supports backup of hard and soft links when backing up POSIX compliant file systems on 
OES 2 Linux servers. It supports backup of hard links on the NSS file system on OES 2 Linux servers. 


In the case of hard links, a file is backed up for each instance of a hard link. TSAFS provides an option 
for backup applications that backs up the file data for only the first instance of the hard link and 
maintains stubs without backing up file data for subsequent instances. For a successful restore, 
ensure that the restore includes the first instance. In the case of soft links, TSAFS backs up soft link 
information and also data indicating which file it is linked to. If the backup definition does not 
include the linked file, then the file’s data is not backed up. 
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Backing up NCP and Dynamic Storage Technology Shadow Volumes 


NCP server for Linux allows administrators to create NCP volumes and Dynamic Storage 
Technology (DST) shadow volumes on OES 2 Linux. These volumes contain additional metadata for 
files and directories as compared normal POSIX compliant file systems. 


TSAFS supports backup and restore of additional metadata for files and directories under NCP and 
Dynamic Storage Technology volumes. When backing up an NCP volume file or directory, trustee 
assignments and inherited rights filters for the data set is additionally backed up using the Novell 
client libraries. You must backup the secondary volume to back up the files and directories on it.The 
secondary volume can be backed up independently of the primary volume. 


For information on setting up NCP volumes and the NCP metadata on them, see “Using Backup 
Utilities with DST Shadow Volumes” in the OES 2 SP3: NCP Server for Linux Administration Guide. 


DST shadow volumes use NSS file system volumes, so their metadata is the same as for NSS 
volumes. For information about backing up shadow volumes, see OES 2 SP3: Dynamic Storage 
Technology Administration Guide 


Backing Up Clusters 


Novell Cluster Services is a server clustering system that ensures high availability and manageability 
of critical network resources including data (volumes), applications, and services. It is a multinode 
clustering product for OES that is enabled for eDirectory and supports failover, failback, and cluster 
migration of individually managed cluster resources. For more information, see the Novell Cluster 
Services documentation (http://www.novell.com/documentation/oes2/cluster-services.html#cluster- 
services). 


For a cluster to work as a high-availability system, the file system, the applications, and services that 
run on the cluster should be cluster-enabled. SMS supports backup and restoration of cluster-enabled 
resources. In addition, the backup session can be automatically recovered in case of a failover or 
failback of the target cluster-enabled resources, if the backup application supports it. 


Consider the following before preparing for backup and restoration of cluster-enabled resources. 
These conditions are applicable only if the backup application is cluster-enabled. 


+ If cluster-enabled resources are to be backed up or restored, SLP should be used as the discovery 
mechanism. 


+ A cluster node will have clustered and one or more non-clustered volumes. When the particular 
cluster server is chosen for backup, only the clustered volumes will be listed. To backup non- 
clustered volumes, choose the physical server instead. 


TIP: To treat all cluster volumes as non-clustered for backup, disable the cluster option in TSAFS, see 
Section 3.5, “Configuring the Target Service Agent for File System,” on page 17. This will enable 
listing of all cluster volumes as part of the cluster node instead of virtual server resource. 
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Backing Up Mixed Node Clusters 


During a rolling cluster conversion from NetWare to OES 2 Linux, it is possible to have mixed node 
clusters, where different nodes in the cluster run NetWare or OES 2 Linux. For more information 
regarding mixed node clusters, see the OES 2 SP3: Novell Cluster Services NetWare to Linux Conversion 
Guide. 


TSAFS supports mixed node cluster backup. Path names are represented differently on NetWare and 
OES 2 Linux. In order to achieve a consistent backup, TSAFS supports a NetWare emulation mode on 
OES 2 Linux. This mode is used to make TSAFS behave as a NetWare target on OES 2 Linux. This 
resolves any path name conflicts that might arise because of mixed node clusters in the setup. To 
enable this feature, see the “NetWare Emulation Mode” on page 26. 


Additional Backup Features 


This section describes additional features supported by TSAFS: 


+ “Apparmor Profile for SMDR daemon” on page 25 
+ “GroupWise Backup" on page 25 

* "Non-Caching Mode of Operation" on page 26 

+ “Code Page Support” on page 26 

+ “NetWare Emulation Mode” on page 26 


Apparmor Profile for SMDR daemon 


The default apparmor profile opt .novell.sms.bin.smdrd is available in /etc/apparmor/ 
profiles/extras/ folder. The profile contains all permissions to the paths and libraries and 
permissions that smdr requires during its execution. The profile contains the rw permissions to the 
file system root (/)to enable the backup of any path on the file system. You can modify the profile as 
per your security requirements. On modifying the profile, reload Apparmor with the rcapparmor 
command. 


GroupWise Backup 


TSAFS supports backing up GroupWise database files. TSAFS is integrated with GroupWise to 
provide consistent backups of GroupWise database files by locking them before a backup is taken. 


NOTE: This feature ensures that a snapshot of the GroupWise database files are consistent are 
backed up. This backup cannot be used to restore GroupWise objects such as a particular mailbox or 
a user object. 


To enable the GroupWise backup feature in TSAES, use the following switches: 


smsconfig -1 tsafs --EnableGw 
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Non-Caching Mode of Operation 


TSAFS by default uses a predictive caching mechanism to cache ahead data sets for backup 
operations. Some backup applications process incremental or differential backups by filtering the 
data sets themselves rather than use TSAFS options. Under such circumstances the cache built up by 
TSAFS is not used. This leads to slower backups as TSAFS spends more time caching unwanted data 
sets. 


The non-caching mode of operation disables TSAFS predictive caching thus eliminating any 
performance issues when used with applications that do their own filtering. 


To enable the non-caching mode of operation in TSAFS, use the following switch: 


smsconfig -1 tsafs --noCachingMode 


Code Page Support 


By default, TSAFS assumes that filenames on the disk are UTF-8 encoded. If they are not, TSAFS 
skips these files and reports them in the skipped data set log. In such cases, the following switch can 
be used to set the appropriate code set for backup and restore: 


smsconfig -1 tsafs --useCodeSet=codeset 


For information on codesets, see the tsafs(1) man page. 


NetWare Emulation Mode 


TSAFS by default exposes the Linux File System as the target. TSAFS has a built-in switch that makes 
it possible to expose the TSA as a NetWare File System. This enables you to use TSAFS on OES 2 
Linux as if it is a NetWare target. 


NetWare emulation mode can be turned on using: 


smsconfig -1 tsafs --tsaMode-mode 


where mode is linux, netware, or dual. In linux mode, the TSA displays only the Linux File System 
targets. In netware mode, the TSA displays only NetWare File System targets. In dual mode, both 
the targets are displayed. 


When connected to the NetWare File System target, you can see only NSS file system resources. 


NOTE: NetWare Emulation mode is intended to provide a migration path for applications that are 
already NetWare-aware and might be deprecated in the future. However, all backups taken using the 
NetWare emulation mode will be valid and recoverable in all future releases. 


Restoring Data Using SMS 


This section provides information on how SMS restores data. For more information about options 
supported during a restore, see the respective backup application documentation. 


* Section 42.1, "How SMS Restores Data," on page 27 
* Section 4.22, "Restoring Trustee or Owner Assignments," on page 28 
+ Section 4.2.3, "Limitation for Restoring an NCP POSIX Volume,” on page 28 
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How SMS Restores Data 


During a restore session, the backup engine reads the backup storage media, and the Target Service 
Agent (TSA) compares the media data set to the existing hard disk data set. The Target Service Agent 


evaluates each data set according to the following criteria: 


+ 


Is this data set a subset of what is being restored? 
Is this data set found on the hard disk? 


+ 


+ 


Which parts of the data set are subject to restoring? 


+ 


+ 


recent date than the existing copy? 


Is this data set a parent or a child, and is the Overwrite parameter set to Yes or No? 


If the parameters for a child are set to Overwrite Only if Newer, does the backup copy have a more 


NOTE: When machine is running, system libraries cannot be restored because smdr uses 


dynamically loaded libraries from /lib folder for restoration. 


BEGIN 


Go to backup session 


on storage media. 


another data set 
to read? 


restore 


data set 
a subset of what 
you Te 
restoring? 


Compare date of 
data set on media 
to date of 
data set on disk. 


] 


Is 
date of 
data set on media 
the newer 
date? 


no 


ignore 


ignore 


1 


restore 


Is 
data set 
a parent or 
a child? 


restore 
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4.2.2 Restoring Trustee or Owner Assignments 


The file system backup contains the trustee or owner/group names for files and directories that were 
backed up. On restoration these names are used to map them back to the corresponding file system 
object IDs. 


If the name-to-ID mapping is unavailable for any reason then the file is restored with the default 
connection ID. To ensure that the restoration preserves all ID information, update the relevant ID 
store (eDirectory or the user data base) on the system before you attempt the restore operation. 


4.2.3 Limitation for Restoring an NCP POSIX Volume 


On restoring an NCP POSIX volume, the NSS user must be LUM-enabled to preserve the user’s ID. 


43 Restoring NetWare Backups to OES 2 Linux File Systems 


This section describes steps to move data transparently between NetWare and OES 2 Linux file 
systems: 


+ Section 4.3.1, “Prerequisites,” on page 28 
+ Section 4.3.2, “Restoring NetWare Backups to NSS,” on page 29 
+ Section 4.3.3, “Restoring NetWare Backups to Non-NSS File Systems,” on page 29 


4.3.1 Prerequisites 


+ “Linux Mode” on page 28 

+ “NetWare Emulation Mode” on page 28 

+ “NFS Name Space Support on OES Linux” on page 28 
Linux Mode 


The following section assumes that on OES 2 Linux TSAFS is running in the default mode of 
operation, and it is not using NetWare emulation. 


NetWare Emulation Mode 


If the NetWare emulation mode (see “NetWare Emulation Mode” on page 26) is used, then TSAFS on 
OES 2 Linux can be treated like a NetWare backup or restore. 


NFS Name Space Support on OES Linux 


OES 2 Linux TSAFS supports only the NFS name space. This is to ensure consistency of pathnames 
for both NSS and non-NSS file systems on the same server. 
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4.3.2 Restoring NetWare Backups to NSS 


When restoring data that was backed up from a NetWare source to the NSS file system on OES 2 
Linux, use the following guidelines: 


+ The NFS name space should be enabled on the source from which the backup was taken. 


+ The backup should be restored in the NFS name space on the OES 2 Linux server. 


On restoring data to NSS volumes on OES 2 Linux, there is no data loss. All attributes and streams 
that are supported on NetWare are supported on an OES 2 Linux NSS volume. 


4.3.3 Restoring NetWare Backups to Non-NSS File Systems 


When restoring to NCP volumes under non-NSS file systems, the trustee assignments and inherited 
rights filters are preserved. 


Both backup and restore operations use the Novell client libraries and hence require that the Novell 
client be installed on the server. For more information on how to install and configure the Novell 
client, see Novell Client for Linux Installation and Administration Guide (http://www.novell.com/ 
documentation/linux_client/index.html) 
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Optimizing SMS 


The need for faster backup solutions has grown as the data storage needs have increased and the 
backup window remains unchanged. This section provides a brief overview and specific information 
on enhancing the backup performance. 

+ Section 5.1, “Prerequisites,” on page 31 

+ Section 5.2, “Troubleshooting Backup Performance,” on page 32 


+ Section 5.3, “Fine-Tuning SMS Performance,” on page 33 


Prerequisites 


Backup depends on the combined performance characteristics of the following entities: 


+ Storage subsystem 
+ File system 

+ SMS 

+ Backup application 
+ Tape subsystem 


You need to optimize each of these entities to ensure that they do not impact the throughput of the 
system. 


Storage Subsystem 


For improved performance, it is necessary that all the components should meet the throughput 
requirements. 


If backup is critical and a non-time consuming process, the disk subsystem should be configured to 
deliver high throughput. Doing parallel I/Os at the disk subsystem level improves the overall disk 
throughput, it helps the disk/RAID controllers to group the requests better, which reduces the overall 
seek time and improves the throughput as multiple heads are working at the same time. It is also 
important to ensure that components do not limit performance throughput delivered by other 
components. 


Connecting Ultra320 disks to an Ultra160 controller or connecting both the Network and disk 
controllers to the same IO bus limits the backup performance. 


Creating this parallelism through optimal configuration ranges from, setting up appropriate RAID 
levels to the load balancing of the multiple peer-to-peer buses at different levels, from SCSI to PCI. 
For details on optimizing the storage subsystem, see the respective hardware reference guides. 
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5.2 


File System (NSS) and Applications 


+ The file system performance tuning and networking parameters should be configured for 
improved performance. See the operating system documentation for more information on the 
system tunable parameters. 


+ Backup and file compression operation should not be run simultaneously. For example, if the 
default time for both scheduled backup and restore sessions, and compression is midnight, set 
one of these defaults to different time. If you want to perform a delayed backup that includes 
files flagged for compression, schedule the delayed backup after the compression time to allow 
time for the compression to be completed. 


+ Different types of files have different impacts on the backup performance. For example, backups 
are faster if compressed files are backed up in the same state. If volume compression is turned 
on and you back up compressed files in a decompressed state, restore speed is degraded when 
the existing files are overwritten. Compression is not supported in some environments (such as 
Novell Storage Services 2.0 volumes or ReiserFS). If you intend to restore a file that is currently 
compressed to an environment that does not support compression, back it up in a decompressed 
state. 


+ Anti-virus software running at the time of backup significantly slows down the backup process 
due to checks made on each file access. Most anti-virus software provides options to either 
ignore backup applications accessing the file system or are tuned to validate modify or write 
operations alone during a backup process. Since backup is read-centric, the performance is 
improved significantly. 


See the “Managing Software RAID Devices” section in the OES 2: NSS File System Administration 
Guide (http://www.novell.com/documentation/oes2/stor nss Ix nw/index.html?page-/ 
documentation/oes2/stor nss Ix nw/data/front.html£front) for a detailed discussion on NSS tuning 
parameters. 


SMS 


SMS can be configured to optimally exploit the underlying subsystem capability by fine tuning its 
working parameters. For more information, see Section 5.3, “Fine-Tuning SMS Performance,” on 
page 33. 


Backup Applications 


Backup applications typically process and transfer data obtained from the SMS components to the 
tape sub-system. Backup applications employ different processing models which have different 
performance characteristics and features. Most backup applications provide parameters that can be 
used to optimize performance. For more information, see the respective backup application 
documentation. 


Tape Subsystem 


The tape subsystem typically consists of the tape drivers, devices and media. It is important to 
consider the throughput of the device and employ appropriate devices based on the performance 
needs. In many cases, having a good disk subsystem and a poor tape subsystem limits backup 
performance. For more information, see the appropriate vendor documentation. 


Troubleshooting Backup Performance 


This section provides troubleshooting information that you can use to optimize the Backup 
Performance. 
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5.3.1 


Identify Bottlenecks 


TSATEST is a performance analyzer whose main purpose is to aid troubleshooting backup 
performance bottlenecks. TSATEST, reads data from SMS and discards it, simulating an infinite 
performance of the tape system. It also incorporates recommended processing models for backup 
applications and is used to distinguish performance bottlenecks. 


+ If backup performance is poor, and TSATEST delivers as much as the backup application, then 
the bottleneck mostly points to the storage sub-system. For information on improving storage 
subsystem performance, see ”Storage Subsystem” on page 31. 


+ If backup performance is poor, but TSATEST displays very high throughput on the same storage 
sub-system, then bottleneck points to the backup application or the tape sub-system. For more 
information on backup applications and tape sub-systems, see Section 5.1, ”Prerequisites,” on 
page 31. 


Monitor the disk throughput to determine the efficiency of the disk system to provide data for 
backup. As backup is an disk I/O bound problem, this helps to check if SMS delivers comparable 
performance as the disk system. 


Fine-Tune Performance 


Once the storage subsystem has been optimized, use the SMS tunable parameters to fine-tune 
performance. To accomplish and verify if the appropriate tuning parameter does influence 
performance, TSATEST can be used in various test runs in multiple combinations of TSAFS switches. 
This provides an inductive way towards detecting optimal sweet spots for your system. For more 
information on configuration parameters, seeSection 5.3, ”Fine-Tuning SMS Performance,” on 

page 33. 


For more information on TSATEST, see the Novell Developer Site (http://developer.novell.com/ndk/ 
doc/samplecode/smscomp_sample/tsatest/tsatest.html) 


Fine-Tuning SMS Performance 


TSATEST is used to determine bottlenecks in the backup systems. For more information, see 
Section 5.2, “Troubleshooting Backup Performance,” on page 32. Using this information, the 
following tunable switches can be used to identify sweet spots that helps improve throughput of 
your backup systems. 


Basic Configuration 


Configure the following basic tunable parameters to enhance the SMS performance. For more 
information about configuring the switches, see Section 3.5, “Configuring the Target Service Agent 
for File System,” on page 17. 
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Table 5-1 Basic Tunable Parameters to Enhance SMS Performance 


Task 


Set the number of read 
ahead threads for a 
backup job 


Purpose Field Name in the 
iManager Interface 

This enables the TSA to Read Threads Per Job 

read data ahead of the 

engine request during 

backup. This switch is 

based on the number of 

processors in the system 

and the system load due 

to other processes in the 

system. 


The default value is 4. 
This value ranges from 1 
- 32. 


Set the read threads to a 
higher value if you have 
more processors or less 
system load during 
backup.Also, monitor the 
disk I/O performance 
and set the switch to 
higher values to check if 
the disk I/O improves 
and strike a balance 
between high backup 
performance and system 
utilization. 
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Command 


TSAFS / 
readthreadsperjob= 
value 


Task 


Set the read buffer size 


Set the percentage of 
server's free memory to 
store cached data sets. 


Purpose 


This is the number of 
data bytes read from the 
file system by a single 
read operation. This 
switch is based on the 
buffer sizes requested 
by the engine. For 
example, if the engine 
requests 64 KB of data 
for each read operation, 
set the buffer size to 64 
KB to allow the TSA to 
service the engine 
better. 


Another aspect to 
consider while setting 
the buffer is the mean 
size of the data set being 
backed up. For example, 
if the mean size of the 
data set is 55 KB, set the 
buffer size to 64 KB so 
additional buffer is 
added to the mean size 
of the data set. This is 
required for backup of 
file characteristics and 
SIDF encoding. 


The default value is 
65536 bytes. This value 
ranges from 32 KB to 
256 KB. 


This is used to specify 
the percentage of total 
server memory that the 
TSA can utilize to store 
cached data sets. This 
represents a maximum 
percentage value of total 
server's free memory 
that the TSA uses to 
store cached data sets. 


The default value is 10% 
of the total server 
memory. 


Set it to a higher value to 
enable the TSA to cache 
more data sets and 
improve the backup 
performance of TSA. 


Field Name in the 
iManager Interface 


Read Buffer Size 


Cache Memory 
Threshold 


Command 


TSAFS / 
readbuffersize= 
value 


TSAFS / 
cachememorythresho 
ld- 

value 
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Task Purpose Field Name in the Command 
iManager Interface 


Enable or disable This option is used to Enable Caching TSAFS /CachingMode 
caching based on specify if TSA should do | noCachingMode 
engine usage and predictive caching during 

workload being backed backups. Caching 

up improves backup 


performance, on certain 
workloads, by 
prefetching files in 
memory. 


The default value is 
cachingMode. 


If the datasets are not 
requested in the order in 
which they were 
prefetched, backup 
performance may 
degrade for some 
engines and for certain 
workloads. 


To determine if caching 
will improve the backup 
performance, enable 
caching and load TSA 
with the following TSA 
debug options: 
smsdebug=800003c 
and 
smsdebug2-fffff100 


The TSA debug log file 
displays the number of 
datasets opened by the 
engine and the TSA. If 
the difference in both the 
values is significant 
(75094), then you are 
recommended to disable 
caching for optimal 
performance. 


For information on 
enabling debug logging, 
see Appendix B, 
"Creating SMS Debug 
logs," on page 61 


5.3.2 Advanced Configuration 


Configure the following advanced tunable parameters to enhance the SMS performance. For more 
information about configuring the switches, see Section 3.5, “Configuring the Target Service Agent 
for File System,” on page 17. 


36 OES 2 SP3: Storage Management Services Administration Guide for Linux 


Table 5-2 Advanced Tunable Parameters to Enhance SMS Performance 


Field Name in the 


iManager Interface Command 


Task Purpose 


Set the This sets the maximum number Read Thread TSAFS / 
percentage of of read threads that process a Allocation readthreadallocation- 
read threads data set at a given time. This value 
to process a determines the percentage of 
data set. readthreadsperjob that should be 
allocated to a data set before 
proceeding to cache another 
data set. 


This enables the TSA to build a 
cache of data sets in a 
nonsequential manner. Engines 
reading data sets simultaneously 
have the advantage of improved 
performance if the TSA builds a 
nonsequential cache rather than 
a sequential cache. 


The default value is 100. This 
sets all read threads to 
completely process a data set 
before proceeding to another 
data set. 


Set this value lower than 100 if 
the backup engine reads multiple 
data sets from the TSA 
simultaneously. 


Set the This sets the maximum number Read Ahead Throttle — TSAFS / 

maximum of data sets that the TSA caches readaheadthrottle- 
threshold for simultaneously. This prevents the value 

data sets that TSA from caching parts of data 

can be sets and enables complete 

processed caching of data sets instead. 


simultaneously i ? : 
Use this switch along with the 


readthreadallocation switch. 


Set this value to reflect the 
number of data sets that the 
backup engine processes 
simultaneously. The default value 
is 2. 
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Running Storage Management Services 
In a Virtualized Environment 


SMS runs in a virtualized environment just as it does on a physical server running Novell Open 
Enterprise Server (OES) 2 for Linux, and requires no special configuration or other changes. 


To get started with virtualization, see Introduction to Xen Virtualization in the Getting Started with 
Virtualization (http://www.novell.com/documentation/vmserver/virtualization_basics/ 
index.html?page=/documentation/vmserver/virtualization_basics/data/front_html.html) guide. 


For information on setting up virtualized OES 2 Linux, see Setting Up Virtual Machines in the 
Getting Started with Virtualization (http://www.novell.com/documentation/vmserver/ 
virtualization_basics/data/b9uglku.html) guide and OES Linux Virtual Machines in the Novell 
Virtualization Technology: Guest Operating System Guide (http://www.novell.com/documentation/ 
vmserver/guest_os_sp1/data/bb9uns2.html). 
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7.1 


7.11 


7.1.2 


SMS Security for SMDR 


SMS provides remote backup and restore services using the Storage Management Data Requester 
(SMDR). This gives you the flexibility to use SMS from a single server to back up the entire network. 
This section details the security features available in SMS to secure your backup networks. 


The SSL protocol is used to secure remote backup connections that are created by SMDR. For more 
information on SSL/TLS, see RFC 2246 (http://www.ietf.org/rfc/rfc2246.txt). 


The following topics are discussed in this section: 


+ Section 7.1, “Using SSL in SMDR,” on page 41 
+ Section 7.2, “SMDR as a Client and Server,” on page 42 


+ Section 7.3, “Configuration Options,” on page 43 


Using SSL in SMDR 


SMDR is enabled to use SSL and uses Novell TLS (NTLS) library for SSL operations. 


When SMDR is configured to use SSL, it encrypts the channel by securing data that is exchanged 
between servers. For configuration options in SMDR, see Section 7.3, “Configuration Options,” on 
page 43. 


SMDR provides you the option of using SSL with or without certificates. 


+ Section 7.1.1, “Using SSL without Certificates,” on page 41 
+ Section 7.1.2, “Using SSL with Certificates,” on page 41 


Using SSL without Certificates 


When using SSL without certificates, SMDR uses cipher suites based on the anonymous Diffie- 
Hellman protocol to exchange session keys. This mechanism provides session security because the 
data is encrypted across the connections. However, this does not provide server identity 
authentication because certificates are not used to validate server identity. 


Using SSL with Certificates 


When SMDR is configured to use SSL with certificates, it has the ability to authenticate the server 
identity and secure data on the network. The server’s certificate that is exchanged during the SSL 
channel establishment provides server authentication. 
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Certificate Types 


SMDR supports PEM (Privacy Enhanced Mail) encoded or DER (Distinguished Encoding Rules) 
encoded certificates. Certificates in other formats must be converted to either PEM or DER format in 
order to be used with SMDR. 


PEM and DER are used by openSSL to represent public and private keys and signatures for X.509 
compliant certificates. The DER format is a block of base64 encoded data for a digital certificate. The 
PEM format is the DER format encoded with additional header and footer lines. 


7.1.3 Password-Encrypted Private Key Files 


Private keys stored on servers are typically encrypted using passwords. SMDR supports SSL private 
key files that are encrypted using this method. 


If the private key file is password-encrypted, SMDR loads and displays a screen to accept the 
password. Enter the password at the prompt to continue loading SMDR. 


7.2 SMDR as a Client and Server 


SMDR is capable of connecting and backing up remote systems, which makes it behave both as a 
client and as a server. You need to select appropriate options to configure SMDRs for the required 
SSL behavior. 


When SMDR connects to remote servers and communicates with loaded TSAs on those servers, it 
acts as a client. In turn, the SMDR module ruming on those remote servers act as server, servicing the 
client SMDR requests. 


In Figure 7-1, SMDR running on Server A behaves as a client that services requests for backup 
application and for TSAFS running on the remote Server B. SMDR on Server B behaves as a server to 
SMDR rumning on Server A. 


Figure 7-1 SMDR as a Client and Server 


Server A 


f re m Server B 


Backup 
Application 


Jo ne e > <=) 
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7.3 Configuration Options 


To configure SMDR to use SSL with certificates, update the SMDR configuration file with the SSL 
options in this section. 

+ Section 7.3.1, “Server Certificate Options,” on page 43 

+ Section 7.3.2, “Client Certificate Options,” on page 43 

+ Section 7.3.3, “Miscellaneous Options,” on page 44 


+ Section 7.3.4, “SSL Option Considerations,” on page 44 


7.3.1 Server Certificate Options 


The options specified below, enables you to configure server-side SMDR to use certificate-based SSL 
protocol. See Section 7.2, “SMDR as a Client and Server,” on page 42 for details on SMDR's behavior 
as a server. 


Table 7-1 Server Certificate Options 


Options Description 
PublicKey Path of the server's public key certificate file. By default, this is disabled. 
PublicKeyType The format of the server's publickey certificate file. This option accepts either 


PEM or DER. By default, the value is PEM. 
PrivateKey Path of the server's private key certificate file. By default, this is disabled. 


PrivateKey Type The format of the server's privatekey certificate file. This option accepts either 
PEM or DER. By default, the value is PEM. 


7.3.2 Client Certificate Options 


The following options are used to enable client-side SMDR to use the certificate-based SSL protocol. 
See Section 7.2, “SMDR as a Client and Server,” on page 42 for details on SMDR behavior as a client 


Table 7-2 Client Certificate Options 


Options Description 
TrustedCertificate Path of the trusted CA certificate. By default, this is disabled. 
TrustedCertificate Type The format of the trusted CA certificate. This option accepts either PEM or DER. 


By default, the value is PEM. 
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7.3.3 Miscellaneous Options 


Table 7-3 Miscellaneous Options 


Options Description 


LegacyConnections Specifies if connections can be established with older SMDRs that do not 
support SSL. This is a Boolean switch and can be configured as enable or 
disable. The default value is enable. This is applicable only when SMDR 
behaves as a client. See Section 7.2, “SMDR as a Client and Server,” on 
page 42 for more information. 


DataEncryption Specifies if the data needs to be encrypted or not. This can be configured as 
optional or mandatory. If the host server and target server are configured as 
optional, the data is not encrypted and only authentication information is 
encrypted. If either the client or the server is configured as mandatory then the 
data is also encrypted. 


NOTE: Because performance is critical during backup, you can optionally configure SMDR to use 
SSL to only encrypt sensitive authentication information instead of all communications between 
SMDRs. To do this, disable the DataEncryption option. 


7.3.4 SSL Option Considerations 


When configured with some SSL options, SMDR can result in connection failures to other SMDRs on 
the network. The following information details how different options impact the connection behavior 
in SMDR. 


Table 7-4 lists client SMDR configuration options that force client SMDR to establish communication 
to only SSL-enabled SMDRs on the network. Attempts to connect to SMDRs that are not configured 
to use SSL result in connection failures. 


Table 7-4 SSL Interoperability between Client and Server SMDRs 


Client SMDR Options Server SMDR Configuration Connection Status 


TrustedRootCertificate: <path> PublicKey and PrivateKey Pass 


LegacyConnections: disable 


TrustedRootCertificate: <path> PublicKey and PrivateKey Fail 
. . configured 
LegacyConnections: disable 
LegacyConnections: disable SSL enabled SMDR Pass 
LegacyConnections: disable Legacy SMDR Fail 
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8.1 


8.1.1 


Coexistence and Migration Issues 


One of the top priorities in designing Novell Open Enterprise Server (OES) 2 for Linux was to ensure 
that new OES components, running on either NetWare or Linux, can be introduced into an existing 
network environment without disrupting any of the products and services that are in place. It was 
also deemed important that there be a clear migration path for moving existing products or services 
and related data onto the OES platform. 


This section discusses the issues involved in the coexistence and migration of SMS in OES. It is 
divided into the following sections: 


+ Section 8.1, “Coexistence,” on page 45 


¢ Section 8.2, “Migration,” on page 48 


For a general discussion of coexistence and migration issues in OES, see the Migration and 
Coexistence Web site (http://www.novell.com/documentation/oes2/migrate-consolidate- 
coexist.html#migrate-consolidate-coexist). 


Coexistence 


This section provides information regarding the coexistence of the OES version of SMS with existing 
NetWare or Linux networks, and with previous versions of the product. The following topics are 
discussed: 


+ Compatibility 


+ Coexistence Issues 


Compatibility 


+ SMDR 
+ Using iManager 
+ TSAFS 


SMDR 


* "Wire Compatibility of the SMDR Protocol" on page 45 
+ “Discovery Protocols Used in SMDR” on page 46 


Wire Compatibility of the SMDR Protocol 


The SMDR (see Section 1.2.1, “Storage Management Data Requester,” on page 10) wire protocol is 
fully compatible between Linux and NetWare platforms. In other words, there are no changes in the 
wire protocol. This enables SMDR to communicate with other SMDRs on the same network 
irrespective of the platform that it is running on. 
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Discovery Protocols Used in SMDR 


SMDR uses standard discovery and name resolution protocols. SMDR is enabled to SLP protocol 
version 1 upwards. SMDR also uses the hosts file to discover other SMDRs on the network and 
supports a policy ladder implementation to describe the order of priority of using any one 
mechanism over the other. All these methods are consistent and compatible on both NetWare and 
Linux. 


SMDR on NetWare uses SAP as an additional discovery mechanism. SAP is not supported for SMDR 
on OES 2 Linux. See "OES Linux on IPX-Based Networks" on page 47 for more information on how 
compatibility for SAP can be achieved. 


Using iManager 


You can use the latest SMS plug-in to iManager running on an OES 2 Linux server to configure SMS 
services on OES 2 Linux, OES 1 Linux, and NetWare. An openWBEM instance must be running on 
the NetWare server. 


TSAFS 


* "Data Stream Compatibility" on page 46 


Data Stream Compatibility 


TSAFS (see "File System TSA (TSAFS)” on page 11) uses the ECMA standard SIDF to format file 
system information into data streams. These streams are supplied to a backup application during 
backup. Backup applications usually present these streams during a restore, and the TSAFS 
interprets them. 


TSAFS provides full data stream compatibility between NetWare and OES 2 Linux. In other words, 
TSAFS on Linux continues to maintain backward compatibility with all existing backups. That is, if 
the backup application provided TSAFS with a NetWare data stream from an older backup, it is 
capable of restoring this data correctly to NSS on OES 2 Linux without any data loss. However, if an 
attempt is made to restore data from a NetWare file system or NSS file system, backing up to a non- 
NSS file system on OES Linux would create data loss due to the inherent differences in file system 
semantics. 


The following list indicates some of the metadata that is lost during a restore of NetWare traditional 
file system data or NSS file system data to non-NSS file systems on OES 2 Linux: 

* Secondary data streams 

* Extended attributes 

* Trustees 

* File owner/modifier/archiver information 

* Inherited rights filters 

* Directory quotas 

* User space restrictions 

* File attributes such as hidden, rename inhibit or copy inhibit 


* File characteristics such as compressed, migrated and sparse 
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8.1.2 


Coexistence Issues 


+ Backup Application Support for OES Linux File System Backup 
+ OES Linux on IPX-Based Networks 


Backup Application Support for OES Linux File System Backup 


SMS services are consumed by various commercial backup applications. Backup applications might 
need to be upgraded to enable backing up of OES 2 Linux. For more information, refer to the 
commercial vendor's backup application documentation. 


SMS also supports a NetWare emulation mode (see “NetWare Emulation Mode” on page 26) where 
the Linux TSAFS exposes the system as though it were a native NetWare system. Some backup 
applications might use this option in the interim, while they move to a broader solution. Although 
the emulation mode itself might be deprecated in the future (After all backup applications have 
moved to backing up OES 2 Linux natively), data backed up using this option would be recoverable 
by all future TSAs. nbackup (see Section 1.3, “Backup Applications,” on page 11) supports backing 
up of OES 2 Linux. However, these backup applications are technology demonstrators and are not 
positioned as enterprise backup applications. 


OES Linux on IPX-Based Networks 


SMDR on NetWare can be configured to use Service Advertising Protocol (SAP) for locating other 
SMDRs in an IPX environment. SAP is not supported on OES 2 Linux, so in a pure IPX environment, 
SMDR on OES 2 Linux cannot discover or resolve SMDRs on NetWare and vice versa. For SMS 
services on OES to work independently of platforms, discovery and name resolution protocols that 
are supported by SMDR must be common across all the platforms. 


For more information on protocols supported by SMDR, see Section 3.4, “Configuring SMDR,” on 
page 15. 


Using SMS Across Mixed Node Clusters 


Novell Cluster Services provides a migration path wherein a cluster can have a mix of NetWare and 
Linux nodes during a rolling cluster conversion. For more information regarding mixed node 
clusters, see the OES 2 SP3: Novell Cluster Services NetWare to Linux Conversion Guide. 


TSAFS supports backing up of NSS file system resources on nodes in a mixed node cluster with 
failover/failback support. To back up cluster resources in a mixed node environment, use the TSAFS 
on OES 2 Linux in the emulation mode of operation. See “NetWare Emulation Mode” on page 26 for 
more information on how to use the emulation mode. 
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8.2 Migration 


As SMS does not store any data on the server apart from its configuration files. You install SMS 
components to bring up SMS services on the migrated server. If you are migrating an existing 
NetWare server to Linux, remember the following: 


+ SMS must be selected as part of OES installation of the new server. This ensures that all relevant 
software components are installed. 


+ Configuration files are not migrated and adapted to the OES 2 Linux environment. Any 
configuration updates must be done using iManager. For information, see Section 3.4, 
“Configuring SMDR,” on page 15 and Section 3.5, “Configuring the Target Service Agent for File 
System,” on page 17. 
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9.1 


Troubleshooting SMS 


This section provides troubleshooting information that you can use to resolve some of the issues that 
might arise during backup or restore operations. 


+ Section 9.1, “Startup and Connection Issues,” on page 49 
+ Section 9.2, “Common Backup and Restore Issues,” on page 50 
+ Section 9.3, “Backup and Restore Issues,” on page 52 


+ Section 9.4, “Cluster Related Issues,” on page 53 


Startup and Connection Issues 


+ “novell-smdrd fails to start with the default AppArmor profile” on page 49 
+ “Unable to connect to target server or service” on page 49 


+ “Unable to modify, SMDR listener IP address using iManager” on page 49 


novell-smdrd fails to start with the default AppArmor profile 


Possible Cause: Novell AppArmor restricts the access to novell-smdrd. 


Action: Using YaST, open Novell AppArmor > Update Profile Wizard and update 
novell-smdrd profile to grant the required access. 


Unable to connect to target server or service 


Possible Cause: SLP is not configured properly. 
Action: Check SLP DA configuration and restart SLP services, followed by SMDR. 


Possible Cause: SMDR failed to register to SLP because SMDR was loaded before SLP services 
were started. 


Action: Restart SLP services followed by SMDR. 
Possible Cause: The SMDR and the TSA are not loaded. 
Action: Ensure that the SMDR and the TSA are loaded. 


Unable to modify, SMDR listener IP address using ¡Manager 


Possible Cause: Changing the SMDR listener IP address is not supported through iManager. 


Action: Manually change the IP address for SMDR listener in smdrd. conf file located at 
/etc/opt/novell/sms/. See smdrd.conf (5) man page for details on editing 
the configuration file. 
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9.2 Common Backup and Restore Issues 


+ ”Backup does not include the modifications” on page 50 
* “Backup is slow” on page 50 


+ “Files were restored but the error file contains a message specifying the name space formats not 
restored” on page 50 


+ “Restore is slow” on page 51 


* “Unable to backup open files in NSS Volumes" on page 51 


+ “Unable to restore compressed files” on page 51 


+ “Unable to set the data set name” on page 51 


+ “Out of disk space" on page 51 


+ "DOS namespace based restores fail for certain files" on page 52 


+ “Backed up filenames display characters of the form [xxxx]” on page 52 


Backup does not include the modifications 


Possible Cause: 
Action: 
Possible Cause: 


Action: 


Possible Cause: 


Differential and incremental backups were combined. 
Use one or the other of these types in conjunction with full backups. 
The modified date filter for backup was set incorrectly. 


Set the modified date filter to the last full or differential backup based on the 
backup type. 


The modify bit was cleared after the last customized backup, so changed files are 


not recognized. 


Action: Modification are backed up based on the modify bit or modified date filter. 


Check for applications on the server that could be clearing the bit. 


Backup is slow 


Possible Cause: Compressed files are being backed up in a decompressed format. 


Action: See “Backing Up Compressed files” on page 22. 
Possible Cause: Migrated files are being backed up by demigrating the data. 
Action: See “Backing Up Migrated Files” on page 22. 
Possible Cause: Background file compression and backup are running at the same time. 


Action: Schedule background file compression before or after backup is scheduled. 


Based on how compressed files are backed up (see “Backing Up Compressed 
files” on page 22) the order of scheduling can be decided. 


Files were restored but the error file contains a message specifying the name 
space formats not restored 


Possible Cause: The file attributes and name space formats are not configured on the volume you 
restored to. 


Action: Check to make sure the name space is configured on the required volume. 
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Restore is slow 


Possible Cause: 
Action: 
Possible Cause: 


Action: 


File compression and restore are running at the same time. 
Schedule restore and background compression of files at different times. 
Compressed files are being overwritten with decompressed files. 


Back up compressed files as compressed in the future, if the restore is going to be 
to a compressed file system. See ”Backing Up Compressed files” on page 22. 


Unable to backup open files in NSS Volumes 


Possible Cause: 


Action: 


TSAFS supports backup of open files on Novell Storage Services (NSS) volumes 
if the CopyOnWrite feature is enabled. The Supervisor right is required to back 
up open files 


To enable CopyOnWrite on a single NSS volume, see the “Backing Up Open 
Files” on page 21. 


Unable to restore compressed files 


Possible Cause: 


Action: 


Possible Cause: 


Action: 


Compression is not supported in some environments such as Novell Storage 
Services 2.0 or ReiserFS on OES Linux. 


Restore the file to a volume that supports compression. 


The file system that the data is restored to does not have the compression feature 
enabled. 


Enable the compression feature on the file system that data is being restored to. 


Unable to set the data set name 


Possible Cause: 


Action: 


This happens when the TSA is unable to restore a particular name in a name 
space. The data set is restored, but while restoring names in all name spaces 
there were name conflicts on the non-primary name spaces. This causes a failure, 
with an error message similar to the following: 

Unable to set the data set name in MACnamespace for sys:/abc/ 
def.txt. Restore will continue processing the data set name 

in other name spaces. 


This is a warning and does not impact the restore process. 


Out of disk space 


Possible Cause: 
Action: 


Possible Cause: 


Action: 


Possible Cause: 


Action: 


There is not enough disk space on the volume to which the data is restored. 
Increase the volume size and restart the restore. 


A user space restriction is set for certain users and the application is attempting 
to restore data that exceeds this space restriction. 


Increase the user space restriction on the restored volume for users who are 
affected. 


There are directory quotas set on specific directories that are being restored, and 
the application is trying to restore data that exceeds the quotas. 


Increase the directory quota on the affected directories then restart the restore. 
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Possible Cause: You might run out of disk space if you restore decompressed files to a volume, 
because the compression does not begin immediately. 


Action: Compress the files before the restore. 


DOS namespace based restores fail for certain files 


Possible Cause: DOS names are usually name mangled forms of their LONG or other namespace 
formats. These names are often auto-generated by the file system. There could be 
a name clash because of existing files or directories on the system having similar 
mangled DOS names as that of the data sets being restored. 


Action: Restore using non-DOS name spaces. 


Backed up filenames display characters of the form [xxxx] 


Possible Cause: When converting characters from Unicode to MBCS for display or to return to 
the backup application it is possible to have characters that do not map to any 
valid MBCS character on the server locale. Such unmappable characters are 
displayed in the square bracket notation. 


Action: This does not impact the backup process. File names are stored in Unicode* and 
MBCS formats during backup and hence on restoring such files the restored files 
will have the correct name convention. 


9.3 Backup and Restore Issues 


+ “During full system restore, smdr crashes and restore fails” on page 52 
+ “Certain files do not get backed up on non-NSS file systems” on page 52 


+ “Backup or restore hangs on submitting a request” on page 53 


During full system restore, smdr crashes and restore fails 


Possible Cause: SMDR uses dynamically loaded libraries from /lib folder for restoration. On a 
running machine, during full restore the entire file system is reloaded this causes 
SMDR to crash and fails to restore system libraries. 


Action: During full system restore, you must restore the system libraries to a non-default 
path and not to the /lib folder. At a later time, move the restored libraries to /lib 
folder when file system is not in use. 


Certain files do not get backed up on non-NSS file systems 


Possible Cause: The connection user might not have access to read the files that are not being 
backed up. 


Action: Connect as a user with higher privileges to back up these files. 


Possible Cause: These files might have been created using a non-UTF-8 locale. TSAFS uses a 
UTF-8 locale to work with file names on non-NSS file systems. 


Action: Use the TSAFS option as detailed in “Code Page Support” on page 26. 
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9,4 


Backup or restore hangs on submitting a request 


Possible Cause: 


Action: 


Stale mount points on the Linux server. This causes TSAFS to wait indefinitely 
on the file system APIs. 


Check for stale mount points on the system and fix them by either remounting or 
unmounting the mount point. 


Cluster Related Issues 


+ “smdr.novell Is Not Registered with SLP for a New Cluster Resource” on page 53 


+ “On the failover of a cluster resource, smdr daemon terminates” on page 53 


+ “Backup fails in a mixed node cluster environment” on page 53 


+ “Clustered volumes are not backed up during full server backups” on page 54 


+ “Cluster pools are not listed on Linux” on page 54 


+ “Reconnect to TSAFS fails when a cluster resource migrates to another cluster node in a mixed 
mode cluster.” on page 54 


smdr.novell Is Not Registered with SLP for a New Cluster Resource 


Explanation: 


Action: 


You might get an error after creating a cluster resource indicating that 
smdr.novell is not registered with SLP for cluster resources, but the smdr.novell 
service for the node is registered. 


Error: "cluster--<212>: Read ResVol error -603" 


The first time a cluster resource is created, smdrd cannot figure it out. Restart 
smdrd. Thereafter, smdrd is aware of the cluster resource. and advertise it 
correctly. 


1 Log in to the server as the root user, open a terminal console, then enter 


On the failover of a cluster resource, smdr daemon terminates 


Possible Cause: 


Action: 


Cluster failover scripts sends SIGTERM command to smdr to release the cluster 
resources. 


SMDR needs time to clear the existing connections and release the cluster 
volumes. Increase the sleep time in the cluster failover script to facilitate the 
release of the cluster volume. 


novell-smdrd restart 


Backup fails in a mixed node cluster environment 


Explanation: 


Possible Cause: 


Action: 


In a mixed node cluster environment, backup fails when node fail-over and fall- 
back happens between NetWare and Linux servers. 


Volume names are in lowercase. 


On backing up data in a mixed node cluster environment, the volume name 
must be passed in uppercase. Linux filenames are case sensitive. 
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Clustered volumes are not backed up during full server backups 


Possible Cause: 


Action: 


The application used does not handle SMS clustered resources, causing clustered 
volumes to be skipped because the TSA was loaded as cluster-enabled. 


Disable cluster support in TSAFS and rerun the backup job. See Section 3.5, 
“Configuring the Target Service Agent for File System,” on page 17. 


Cluster pools are not listed on Linux 


Possible Cause: 


Action: 


Possible Cause: 


Action: 


TSAFS is configured to run in non-cluster mode. 


Enable cluster support in TSAFS and rerun the backup job. See Section 3.5, 
“Configuring the Target Service Agent for File System,” on page 17. 


SLP configuration is incorrect or SMDR failed to register its services to SLP. 


See “Unable to connect to target server or service” on page 49. 


Reconnect to TSAFS fails when a cluster resource migrates to another cluster 
node in a mixed mode cluster. 


Possible Cause: 


Action: 


The backup application may require the same user name and password to be 
available on all nodes in the cluster. During reconnection the same information 
used for the first node is reused by the application to connect to the other node 
as well. At times, the user names or their passwords may be different on the two 
nodes. 


Connect using a user name and password that is common for all cluster nodes. 
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TSA Features 


This section provides information about the various options to modify the backup settings, and the 
types of backup. 


+ Section A.1, “ISA Options,” on page 55 


A.1 TSA Options 


¢ Section A.1.1, “Backup Options,” on page 55 
+ Section A.1.2, “Restore Options,” on page 58 


A.1.1 Backup Options 


All backup types contain advanced options to allow you to customize your backup. You can choose 
specific subsets of a data set to exclude from or include in the backup session by selecting major 
resources, such as volumes, files, directories, or path. You can specify how to scan what you are 
backing up. These options allow you to perform the following tasks. 

+ “Choosing Subsets of Data to Back Up” on page 55 


+ “Scanning Data Sets” on page 57 


Choosing Subsets of Data to Back Up 


Whenever you perform a custom backup or restore, you can use the exclude and include options to 
select subsets of what you want to back up. 


Whether you use exclude or include usually depends on the size of the data you want to back up, 
compared to the size of the data you do not want to back up. 


Exclude 


To back up most of the file system structure or Novell eDirectory tree structure while omitting only a 
small part, use the Exclude option to omit the part you do not want to back up. Everything that you do 
not specifically exclude is included. 


After you exclude part of the structure such as a volume, directory, or container, you cannot include 
any subdirectories, files, or objects beneath that excluded volume, directory, or container. A list of 
existing mount points is maintained by SMS, be default these mount points are excluded. 
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Include 


To back up a small part of the file system structure, use the Include option to specify the data you 
want. Everything you do not specifically include is excluded. 


When you select only part of the file system structure to include (such as a volume), all directories, 
subdirectories, and files under that selection are included in the backup by default. 


In the figure shown below, volume VOL1 is selected as an Include option. All other areas of the file 
system structure are excluded from the backup. You can exclude some subdirectories or files beneath 
your selection if necessary. 


Figure A-1 Include option with a specific volume included, and all others excluded 
Project TTT A2ZCO 
Widget.exe 
Report January.prj 
: February.prj 
March.prj 
Proposal — E Tessier.Inc 
Nu_Artco 
Mary Directories 
F Subdirectories 
Files 
Thomas Directories 
: Subdirectories 
Files 


The same principle applies when you specify a directory with the Include option. The figure below 
shows that all directories, subdirectories, and files under the NetUsers directory are included in the 
backup. All other areas of the file system structure are excluded from the backup. 


HOME — T NetUsers Karl 
Appl 


Figure A-2 Include option with a specific directory included, and all others excluded 


VOL1 Oes2 
Mail 
Plan 
Checklist 


HOME 


The reverse is true when you select a major TSA resource, a directory, or a file as an exclude option. 
All other areas of the file system structure are included in the backup. 


56 OES 2 SP3: Storage Management Services Administration Guide for Linux 


Combining Include and Exclude Options 
By combining the include and exclude options, you can control what is backed up. 


For example, the following command sequence results in volume home being included in the backup 
with the exception of the mary directory and the widget.exe file. 


Include major TSA resources home: 
Exclude directories (full path): /media/nss/HOME/netusers/mary 
Exclude path/files /media/nss/HOME/netusers/karl/project/widget.exe 


Figure A-3 Example combining nbackup Include and Exclude options 


VOL1 Oes2 
Mail 
Plan 
Checklist 


Widget.exe 


— Mary Directories 
L Subdirectories 
Files 


Scanning Data Sets 


You can specify a different type of data set to be scanned. 


A data set is a group of data that can be manipulated by nbackup. Each data set in the file system 
structure can be classified as a parent or a child, and each class includes different types of data items. 


Within nbackup, a parent might be a server, eDirectory, a volume, or a directory. A child is a file, 
which is the lowest level of the directory structure. 


The unit below a parent is not necessarily a child; it might be another parent, or the line might end 
with the parent. The unit above a child must always be a parent. 
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A.1.2 


Figure A-4 Parent and child levels in a file system 


VOL1 Oes2 Project 
Mail 
: Plan 

Checklist Report 


HOME —— TE NetUsers Karl 
Appl 
Proposal 
Mary Training 
Schedules 


Thomas — Manuals r- Widget.Co 


Acme.Inc 
L] Parents (all units above nal) 
Children ( nal units only) 


Items in a data set for either a parent or child should be items that do not frequently change. You 
might choose to exclude from the backup session one or more items in the data set of your target. 


Overwriting a Parent or Child 


nbackup allows you to overwrite all existing parents or children. Children can be overwritten only if 
the date on the data set on the hard disk is more recent than the date of the data set backup. 


Restore Options 


For a custom restore session, you can specify exactly which data to restore. Several options work 
together to allow you maximum flexibility in your restore session. These options allow you to do the 
following: 

+ Choose subsets of data to restore 

+ Open mode options 


+ Overwrite an existing parent (such as a container) or child (such as an object) 


Subsets of Data to Restore 


You can choose specific subsets of a backup session to include in or exclude from the restore session 
by selecting major resources (such as volumes, server-specific info, or containers) or minor resources 
(such as directories, paths, files, or objects). 


For more information about including and excluding, see “Backup Options” on page 55. 
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Open Mode Options 


Open mode options allows you to customize data for restore. File system data can either be included 
or excluded for the session. The speed of the restore depends on the options you set. 


Overwriting Existing Parents or Children 


Be careful when you perform a selective restore and choose whether to overwrite existing parents or 
children, especially eDirectory objects. Objects such as groups and users have references to other 
objects in the eDirectory tree structure that will be affected by a selective restore. 


For example, suppose a part of the eDirectory tree structure gets corrupted and several users are 
deleted from the tree. There is a group that contains those users, but when the users are gone, the 
group purges the membership list to remove those users; the group, however, continues to exist in 
the eDirectory tree structure. 


If you perform a selective restore and choose not to overwrite existing objects, the group membership 
list remains empty even if you restore the users. You need to either add the users manually to the 
group membership list or restore the original group. 
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B.1 


B.2 


Creating SMS Debug logs 


If SMS issues require technical support from Novell, itis useful to have a log that provides additional 
information on the problem. Itis especially useful when problems can be reproduced only on specific 
configurations. SMS provides for creation of debug logs that help technical support provide quicker 
resolutions. 


SMS supports creation of debug logs for smdrd and tsafs. 


+ Section B.1, “Deciding Which Module to Enable for Debug Logging,” on page 61 
+ Section B.2, “Enabling Debug Logging,” on page 61 
+ Section B.3, “Location of the Debug Log,” on page 62 


Deciding Which Module to Enable for Debug Logging 


Although it is useful to have debug logs of all operations, itis necessary to control the size of the logs. 
In order to achieve this, SMS provides module specific debug logging: 


+ For problems related to connecting to remote targets, debug logging for SMDR should be 
enabled. For example, if a backup application is unable to see a remote target SMDR, then enable 
debug logging for SMDR at the local and remote servers. 


+ For problems that are related to backup or restore to a particular target service, debug logging 
should be enabled for that particular target service. For example, debug logging can be enabled 
for TSAFS to trace a problem where errors are received for a set of files. 


As a general rule, if an issue is seen before connecting to a target service, enable debug logging for 
SMDR. If issue is seen after connecting to a target service, enable debug logging for the target service. 


Enabling Debug Logging 


Debug logging uses two switches, SmsDebug and SmsDebug2, to control the amount of logging. 
SmsDebug is used to log information about a particular feature, and SmsDebug2 is used to control 
the level of debug messages required. Although the details of all possible values for these switches 
are beyond the scope of this document, it is important to note that both these switches must be 
supplied in the command line to enable debug logging. Novell support might request additional 
debug logs to be generated for specific features based on the complexity of the problem. 


Use the following options to enable or disable debug logs: 


+ Section B.2.1, “SMDR,” on page 62 
+ Section B.2.2, “TSAFS,” on page 62 
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B.2.1 SMDR 


+ “Enabling Debug Logging” on page 62 
+ “Disabling Debug Logging” on page 62 
Enabling Debug Logging 


1 Kill the SMDR process 

pkill smdrd 
2 Enable debug and restart SMDR 

/opt/novell/sms/bin/smdrd --smsdebug fffffffc --smsdebug2 fffffffc 
3 Perform the tests to reproduce the problem. 


4 The error messages will be logged in the debug log file. 


Disabling Debug Logging 


pkill smdrd 


B.22 TSAFS 


* "Enabling Debug Logging" on page 62 
* "Disabling Debug Logging" on page 62 
Enabling Debug Logging 


smsconfig -1 tsafs --smsDebug-fffffffc --smsDebug2-fffffffc 


Disabling Debug Logging 
* Unload TSA 
smsconfig -u tsafs 
* Reload TSA 


smsconfig -1 tsafs 


B.3 Location of the Debug Log 


+ Section B.3.1, “Debug Log Location,” on page 63 
+ Section B.3.2, “Reducing the Debug Log Size,” on page 63 
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B.3.1 Debug Log Location 


By default, the debug files are created in /var/opt/novell/log/sms/. The debug file name for 
smdrd is smdrd debug xxxx.log where xxxx is the process id for smdrd. The debug file name for 
tsafs is tsafs_debug_xxxx.log where xxxx is the process id for smdrd. 


Each time smdrd is run with debug options, new debug log files are created. If TSAFS is loaded and 
unloaded with debug options without restarting SMDR, debug messages are appended to the same 
TSAFS debug file. 


To change the location where the debug logs are created, use the DebugFileName switch. For 
example, to change the debug file location to /home/testuser/, enter the following command: 


smdrd -debugfilename=/home/testuser/smdrd -smsdebug-fffffffc -smsdebug2-fffffffc 


The above command creates a file smdrd_xxxx.log in /home/testuser/ directory. 


B.3.2 Reducing the Debug Log Size 


Debug logs can take a large amount of space depending on the length and nature of operations 
performed with SMS. The following procedures can help reduce the size of the debug log: 


+ Ensure that SMS modules are run in debug mode for only those operations that are causing 
problems. If multiple backup or restore jobs are running at the same time, this would increase 
the size of the debug logs. 


* Ensure that only a few files or directories are included. To reduce the size and time taken to 
generate log files, try to narrow down a problem to a particular file or directory you suspect is 
causing a problem. 

* Turn off debug logging after the debug process is complete. Debug logging can impact 
performance as well as generate unnecessary debug log information that occupies disk space. 


* Compressing the log files before sending them to Novell Support also helps in getting the logs to 
arrive quickly even if slower links are involved in the transfer. 
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POSIX File System Support 


This section provides information regarding the TSAFS support of POSIX-compliant file systems like 
ReiserFS, Ext2, Ext3, and XFS file systems on the Novell Open Enterprise Server (OES) 2 for Linux. 
These file systems are sometimes referred to in the document as non-NSS file systems. 


POSIX-compliant means file systems that comply to the IEEE Std 1003.1 system interfaces. For more 
information, See Open Group Publications Web site (http://www.unix.org/single unix specification). 


Backup of Linux POSIX file systems requires that ACLS and POSIX permissions be set on the Linux 
path for the LUM-enabled user performing the backup. The root user has all permissions needed to 
perform backup of any Linux path. You can use the Linux chmod(8) and chown(8) commands to give 
the backup user the Linux POSIX permissions to the directory being backed up. 


The following table lists metadata that is backed up or restored to non-NSS file systems on OES 2 
Linux. The table uses the definition of metadata structure fields from the definition of the structure 
stat. (See man page stat(2) for more information) 


Metadata Description 


st mode Mode of the file, including File types and File 
access permissions 


st nlink Number of hard links to the file 
st uid User ID of the file 

st gid Group ID of the file 

off t Size of the file 

st atime Time of last access 

st mtime Time of last data modification 
File Types 


+ Block special files 

+ Character special files 
+ Regular files 

+ Directories 

+ Symbolic links 

+ Socket files 


Additionally, TSAFS also backs up the following information for a file or directory (when applicable), 


+ Symbolic link information 
+ Data stream 


+ Extended ACLs (POSIX Draft ACLs) 
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+ Extended attribute streams 


+ File attributes on a Linux second extended file system 


For more information on extended ACLs, see POSIX Access Control Lists on Linux (http:// 
www.suse.de/-agruen/acl/linux-acls/online/). 


For more information on file attributes on a Linux second extended file system, see man page 


chattr (1), installed by the RPM e2fsprogs. 


POSIX Compliant File Systems Limitations 


+ Backing up and restoring Extended Attributes is supported within the same file system, but 
restoration is not supported across different file systems. 


+ During restoration, a non-root user cannot overwrite the read-only files to the POSIX-complaint 
file systems, because write access is required for updating the files. 
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D.1 


D.2 


SMSLS Utility 


The smsls utility generates a list of files and directories based on the specified filter options. This 


utility stores the last executed time and EFL epoch in a user-specified configuration file and generates 
the file paths in the specified output file. 


¢ Section D.1, “Syntax,” on page 67 


¢ Section D.2, “Options,” on page 67 


¢ Section D.3, “Examples,” on page 68 


Syntax 


smsls [options] 


Options 


Table D-1 SMSLS Options 


Linux Options 


Description 


-a 


--list-archived 


Generates a list of files whose archive bit is set. 


-m 


--list-meta-archived 


Generates a list of files whose metadata archive bit is set. 


-0=FILE PATH 


--output=FILE_PATH 


Specifies the path to the file that stores the deleted file list. A new 
FILE_PATH.deleted file is created to store the deleted file list. 


--nodirs Includes only the files in the modified file list, not the directories. By default, 
directories are included in the modified file list. 

-U Specifies the username for connecting to the Target Service Agent (TSA). This 
is a mandatory option. 

--user 

-P Specifies the password to connect to the TSA. Specify the password by using 
the environment variable SMSLS_USER_PASSWORD. If no password is 

password specified, smsls prompts for a password. 

--path Specifies the volume name or the location to generate the modified file list and 


deleted file list. This is a mandatory option. 
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D.3 


Linux Options Description 


--conf-file=FILE_PATH Specifies the location of the file for storing the configuration details. The smsls 


utility stores the last run time and the epoch details in this configuration file. 
This is a mandatory option. 


--init Initializes the smsls utility. This stores the EFL epoch and the current date and 
time in the specified configuration file. 

--list-epochs Lists all the active epochs for the specified volume. 

-h Displays the help information for the smsls utility. 

--help 


Examples 


On performing a full backup, you must initialize the smsls tool. During initialization, the smsls utility 
stores the EFL epoch and the current date and time in the configuration file. For the subsequent 
executions, the same configuration file needs to be provided. 


This file list is used by engines that take a list of paths as input for more granular incremental 
backups. You can use the smsls utility to view information about files and epochs.. 


+ 


To initialize the smsls utility for the volume VOL1 and to store the current configuration in the 
file smsls_vol1.conf, enter 
smsls --init --conf-file=/home/smsls_voli.conf --path=/media/nss/VOL1 -U admin 


To generate the list of modified files and deleted files by using the configuration file 
sys:backup-data/smsls_vol1.conf, enter 


smsls -o=/home/fileslist_vol1 --conf-file-/home/smsls voli.conf --path=/media/ 
nss/VOL1 -U admin 


The modified files are listed in the /home/filelist voli file. 
The deleted files are listed in the /home/filelist voli.deleted file. 
To generate the list of files within the directory for a specified volume, enter 


smsls -o-/home/fileslist voli --conf-file-/home/smsls voli.conf --path=/media/ 
nss/VOL1/diri/dir2 -U admin 


To use the archive bit and metadata archive bits to generate the modified file list, enter 


smsls -am -o-/home/fileslist voli --conf-file-/home/smsls voli.conf --path=/ 
media/nss/VOL1 -U admin 


To list the current active epochs, enter 


smsls --list-epochs --conf-file-/home/smsls voli.conf --path-/media/nss/VOL1 - 
U admin 


IMPORTANT: 


* 


* 


You must store the output of a file in the directory. 


If a filtering option is specified for the archive bit and metadata archive bit, the modified time 
option is not used for displaying the file list. 
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E.1 


E.1.1 


E.2 


E21 


Documentation Updates 


Updates were made to the following sections: 


* Section E.1, "April 2013," on page 69 

+ Section E2, “January 2013," on page 69 

+ Section E.3, "August 2012,” on page 70 

+ Section E.4, “July 2012,” on page 70 

+ Section E.5, “September 2011,” on page 70 
+ Section E.6, “December 2010,” on page 70 
+ Section E.7, “November 2009,” on page 71 
+ Section E.8, “December 2008,” on page 71 
+ Section E.9, “December 2007,” on page 71 


April 2013 


Updates were made to the following sections. 


What's New 


Location 


Section 2.1, “What's New (OES 2 SP3 April 2013 
Patches),” on page 13 


January 2013 


Updates were made to the following sections. 


What's New 


Location 


Section 2.2, “What's New (OES 2 SP3 January 2013 
Patches),” on page 13 


Changes 


This section is new 


Changes 


This section is new 
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E.3 August 2012 


Updates were made to the following sections. 


E.3.1 POSIX File System Support 


Location Changes 


“POSIX File System Support” on page 65 Added a new paragraph to backup Posix file system 
for LUM-enabled users. 


E.4 July 2012 


Updates were made to the following sections. 


E.4.1 TSA Features 


Location Changes 

“Exclude” on page 55 Added a new line, “A list of existing mount points is 
maintained by SMS, be default these mount points are 
excluded.” 


E.5 September 2011 


Updates were made to the following sections. 


E.5.1 What's New 
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Location Changes 


Section 2.3, "August 2011 Patch release,” on page 14 New section 


E.6 December 2010 


The NetWare information was removed from this guide. For documentation on SBCON utility for 
NetWare, see the NetWare 6.5 SP8 Documentation Web Site (http://www.novell.com/documentation/ 
nw65/). 


The following changes were made in this section: 


Location Updates 


Section 2.4, “OES 2 SP3,” on page 14 New section 
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E.7 


E.8 


E.9 


Location Updates 


“smsconfig -r, --refresh” on page 19 New option 


November 2009 


The following changes were made in this section: 


Location Updates 


"Before Running the Backup Software” on page 22 Added a new prerequisite, "Users performing backup 


need to be LUM enabled.” 


Section 4.2.3, “Limitation for Restoring an NCP POSIX New section 
Volume,” on page 28 


"novell-smdrd fails to start with the default AppArmor New issue 
profile" on page 49 


December 2008 


The following changes were made in this section: 


Location Updates 
Chapter 2, "What's New,” on page 13 New section 
Appendix D, “SMSLS Utility,” on page 67 New section 


December 2007 


The following changes were made in this section: 


Location Updates 


Section 4.1.2, “Backing Up the File Systems," on Listed the names of POSIX complaint file systems 
page 23 and Appendix C, “POSIX File System ReiserFS, Ext2, Ext3 and XFS. 
Support,” on page 65 


Documentation Updates New section 


Documentation Updates 


71 


72 OES 2 SP3: Storage Management Services Administration Guide for Linux 


